Entropic uncertainty relations and locking: tight bounds for mutually unbiased bases 
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We prove tight entropic uncertainty relations for a large number of mutually unbiased measure- 
ments. In particular, we show that a bound derived from the result by Maassen and Ufhnk [l[ for 2 
such measurements can in fact be tight for up to \/d measurements in mutually unbiased bases. We 
then show that using more mutually unbiased bases does not always lead to a better locking effect. 
We prove that the optimal bound for the accessible information using up to yd specific mutually 
unbiased bases is log d/2, which is the same as can be achieved by using only two bases. Our result 
indicates that merely using mutually unbiased bases is not sufficient to achieve a strong locking 
effect, and we need to look for additional properties. 

PACS numbers: 



We investigate two related notions that are of impor- 
tance in many quantum cryptographic tasks: entropic 
uncertainty relations and locking classical information in 
quantum states. 

Entropic uncertainty relations are an alternative way 
to state Heisenberg's uncertainty principle. They are fre- 
quently a more useful characterization, because the "un- 
certainty" is lower bounded by a quantity that does not 
depend on the state to be measured [2, 3]. Recently, en- 
tropic uncertainty relations have gained importance in 
the context of quantum cryptography in the bounded 
storage model, where proving the security of such pro- 
tocols ultimately reduces to bounding such relations 
Proving new entropic uncertainty relations could thus 
give rise to new protocols. Such relations are known for 
two [l| , or d + 1 [1, @ mutually unbiased measurements 
(see Section U for a definition). Very little, however, is 
known for any other number of measurements 0] • 

Here, we prove tight entropic uncertainty relations for 
measurements in a large number of mutually unbiased 
bases (MUBs) in square dimensions. In particular, we 
consider any MUBs derived from mutually orthogonal 
Latin squares §, and any set of MUBs obtained from 
the set of unitaries of the form {U <£> U*}, where {U} 
gives set of MUBs in dimension s when applied to the 
basis elements of the computational basis. For any s, 
there are at most s + 1 such MUBs in a Hilbert space 
of dimension d = s 2 . Let B be the set of MUBs coming 
from one of these two constructions. We prove that for 
any subset T C B of these bases we have 
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where H(B,\4>)) = -E*=i Mh^logj^l 2 is the 
Shannon entropy Q arising from measuring the state \<p) 
in the basis B = {|&i), . . . , \bd)}- 
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Our result furthermore shows that one needs to be 
careful to think of "maximally incompatible" measure- 
ments as being necessarily mutually unbiased. When 
we take entropic uncertainty relations as our mea- 
sure of "incompatibility" , mutually unbiased measure- 
ments are in fact not always the most incompatible 
when considering more than two observables. In par- 
ticular, it has been shown that if we choose ap- 
proximately (log d) A bases uniformly at random, then 
mini^l/ITD^geT-frO 6 ' 1^)) ^ logd-3. This means 
that there exist (log d) 4 bases for which this sum of en- 
tropies is very large, i.e., measurements in such bases are 
very incompatible. However, we showed that when d is 
large, there exist y/d, mutually unbiased bases which are 
much less incompatible according to this measure. When 
considering entropic uncertainty relations as a measure 
of "incompatibility" , we must therefore look for different 
properties for the bases to define incompatible measure- 
ments. 

Finally, we give an alternative proof that if B is a set 
ofd+1 MUBs we have £ ggB ff(#, |0)) > (d+l)log((d+ 
l)/2) @. Our proof is based on the fact that such a set 
forms a 2-design, which may offer new insights. 

Locking classical correlations in quantum states is an 
exciting feature of quantum information [Tl| , intricately 
related to entropic uncertainty relations. Consider a two- 
party protocol with one or more rounds of communica- 
tion. Intuitively, one would expect that in each round 
the amount of correlation between the two parties cannot 
increase by much more than the amount of data trans- 
mitted. For example, transmitting 2£ classical bits or 
I qubits (and using superdense coding) should not in- 
crease the amount of correlation by more than 2£ bits, 
no matter what the initial state of the two party system 
was. This intuition is accurate when we take the clas- 
sical mutual information X c as our correlation measure, 
and require all communication to be classical. However, 
when quantum communication is possible at some point 
during the protocol, everything changes: there exist two- 
party mixed quantum states, such that transmitting just 
a single extra bit of classical communication can result 
in an arbitrarily large increase in X c The magni- 
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tude of this increase thereby only depends on the dimen- 
sion of the initial mixed state. Since then, similar lock- 
ing effects have been observed also for other correlation 
measures [H], HH • Such effects play a role in very differ- 
ent scenarios: they have been used to explain physical 
phenomena related to black holes [3], but they are also 
important in cryptographic applications such as quan- 
tum key distribution [151 ] and quantum bit string com- 
mitment [HI [l7| . We are thus interested in determining 
how exactly we can obtain locking effects, and how dra- 
matic they can be. 

The correlation measure considered here, is the classi- 
cal mutual information of a bipartite quantum state pab , 
which is the maximum classical mutual information that 
can be obtained by local measurements Ma <8 Mb on the 
state pab [II]: 



AB ) 



max X(A : B) 

M A ®M B 



(1) 



The classical mutual information is defined as T(A : B) — 
H(P A ) + H(P B ) - H(P AB ) where H is the Shannon en- 
tropy. Pa, Pb, an d Pab are the probability distribu- 
tions corresponding to the individual and joint outcomes 
of measuring the state p A B with Ma <8> M B - The mutual 
information between A and B is a measure of the infor- 
mation that B contains about A. This measure of cor- 
relation is of particular relevance for quantum bit string 
commitments Furthermore, the first locking ef- 

fect was observed for this quantity in the following pro- 
tocol between two parties: Alice (A) and Bob (B). Let 
B = {Bi, . . .,B m } with B t = {\b\), \bfo} be a set of 
m MUBs in C d . Alice picks an element k £ {1, . . . , d} 
and a basis Bt £ B uniformly at random. She then sends 
\b\) to Bob, while keeping t secret. Such a protocol gives 
rise to the joint state 

dm 

<s=i t=i 

Clearly, if Alice told her basis choice t to Bob, he could 
measure in the right basis and obtain the correct k. Alice 
and Bob would then share log d+log m bits of correlation, 
which is also their mutual information T c {oab), where 
gab is the state obtained from pab after the announce- 
ment of t. But, how large is T c (pab)i when Alice does not 



announce t to Bob? It was shown 11| that in dimension 
d = 2", using the two MUBs given by the unitaries I®" 
and H® n applied to the computational basis, where H 
is the Hadamard matrix, we have T c {pab) = (1/2) logd 
This means that the single bit of basis information Alice 
transmits to Bob, "unlocks" (1/2) log d bits: without this 
bit, the mutual information is (1/2) log d, but with this 
bit it is log d + 1 . It is also known that if Alice and Bob 
randomly choose a large set of unitaries from the Haar 
measure to construct B, then X c can be brought down 
to a small constant [l(|. However, no explicit construc- 
tions with more than two bases are known that give good 
locking effects. Based on numerical studies for spaces of 



prime dimension 3 < d < 30, one might hope that adding 
a third MUB would strengthen the locking effect and give 
2c(pAB)«(l/3)logd [Hf. 

Here, however, we show that this intuition fails us. We 
prove that for three MUBs given by I®", H® n , and K® n 
where K = (1+ ia x )/\/2 and dimension d = 2™ for some 
even integer n, we have 



Zc(pab) = (1/2) log d, 



(2) 



the same locking effect as with two MUBs. We also 
show that for any subset of the MUBs based on Latin 
squares and the MUBs in square dimensions based on 
generalized Pauli matrices [l9|], we again obtain 
i.e., using two or all \fd of them makes no difference 
at all. Finally, we show that for any set of MUBs B 
based on generalized Pauli matrices in any dimension, 

1 c {pab) = logrf - min| l/ , ) (l/|B|)X; Bg B^(^J < / , >) I i- e -> it 
is enough to determine a bound on the entropic uncer- 
tainty relation to determine the strength of the locking 
effect. Although bounds for general MUBs still elude 
us, our results show that merely choosing the bases to 
be mutually unbiased is not sufficient and we must look 
elsewhere to find bases which provide good locking. 



I. PRELIMINARIES 

Throughout this paper, we use the shorthand notation 
[d] = {!,.. -,d}. We write 

d 

F(s t ,i^)) = -^i(#i.)i 2 io g |(#i.)i 2 , 



for the Shannon entropy [9( arising from measuring the 
pure state \<j>) in basis Bt — {\b\ ),..., \b d )}- In general, 
we will use |6|) with k £ [d] to denote the k-th element of 
a basis Bt indexed by t. We also briefly refer to the Renyi 
entropy of order 2 (collision entropy) of measuring \<p) in 
basis B t given by H 2 (B U \<f>)) = -log£-=i |<#*>| 4 



A. Mutually unbiased bases 

We also need the notion of mutually unbiased bases 
(MUBs), which were initially introduced in the context of 
state estimation [21( , but appear in many other problems 
in quantum information. ^The following definition closely 
follows the one given in [19]. 

Definition 1 (MUBs) Let Bi = {\b\), . . . , \b%)} and 
$2 = {\bf), ■ ■ ■ , \b d )} be two orthonormal bases in C d . 
They are said to be mutually unbiased if \(b\\bf)\ — 
l/Vd, for every k,l £ [d]. A set {B\, . . . ,B m } of or- 
thonormal bases in C d is called a set of mutually unbi- 
ased bases if each pair of bases is mutually unbiased. 

We use N(d) to denote the maximal number of MUBs 
in dimension d. In any dimension d, we have that 
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N(d) < d + 1 If ci = p fc is a prime power, we 

have that N(gQ = d + 1 and explicit constructions are 
known [HEH. If d = s 2 is a square, N(d) > MOLS(s) 
where MOLS(s) denotes the number of mutually or- 
thogonal s x s Latin squares 0]. In general, we have 
N(nm) > min{N(n),N(m)} for all n,m G N [H, [H- 
It is also known that in any dimension, there exists an 
explicit construction for 3 MUBs [2J|. Unfortunately, 
not very much is known for other dimensions. For ex- 
ample, it is still an open problem whether there exists 
a set of 7 MUBs in dimension d — 6. We say that a 
unitary Ut transforms the computational basis into the 
i-th MUB B t = {\b{), \b d )} if for all k £ [d] we have 
= Ut\k). Here, we are particularly concerned with 
two specific constructions of mutually unbiased bases. 



where u> = e 27 ™/ 3 . First, we obtain vectors 

\v hl ) = (|1,1) + |2,3> + |3,2»/V3 
|«i l2 ) = (|1,2) + |2,1> + |3,3»/V3 
\vi, 3 ) = (|1,3) + |2,2) + |3,1»/V3. 

With the help of H we obtain 3 additional vectors from 
the ones above. From the vector Iv^i), for example, we 
obtain 

KO = (|1,1) + |2,3) + |3,2))/V3 
Ki) = (|1,1)+^|2,3)+^ 2 |3,2))/V3 
|« 3 ,i) = (|1, 1) + c^ 2 |2, 3) + 1^|3, 2))/V3. 



1. Latin squares 

First of all, we consider MUBs based on mutually or- 
thogonal Latin squares Informally, an s x s Latin 
square over the symbol set [s] = {1, . . . , s} is an arrange- 
ment of elements of [s] into an s x s square such that in 
each row and each column every element occurs exactly 
once. Let Ly denote the entry in a Latin square in row i 
and column j . Two Latin squares L and L' are called mu- 
tually orthogonal if and only if {(Lij, j £ [s]} = 
{(u, v)\u,v £ [s]}. From any s x s Latin square we can 
obtain a basis for C s <£> C s . First, we construct s of the 
basis vectors from the entries of the Latin square itself. 
Let \ Vl . e ) = (l/^£ iJe[s] i^)M where E L is a 
predicate such that E^j(l) = 1 if and only if L i: j = £. 

such 



Note that for each I we have exactly s pairs i,j 
that Eij(£) = 1, because each element of [s] occurs ex- 
actly s times in the Latin square. Secondly, from each 
such vector we obtain s — 1 additional vectors by adding 
successive rows of an s x s (complex) Hadamard matrix 
H = {hij) as coefficients to obtain the remaining \vtj) 
for t £ [si, where fits = 



with i, j £ {0, . 



1} 



and u) = e 27 ™/' 5 . Two additional MUBs can then be ob- 
tained in the same way from the two non-Latin squares 
where each element occurs for an entire row or column 
respectively. From each mutually orthogonal latin square 
and these two extra squares which also satisfy the above 
orthogonality condition, we obtain one basis. This con- 
struction therefore gives MOLS(s) + 2 many MUBs. It 
is known that if s = p k is a prime power itself, we ob- 
tain p k + 1 w V" MUBs from this construction. Note, 
however, that there do exist many more MUBs in prime 
power dimensions, namely d+ 1 . If s is not a prime power, 
it is merely known that MOLS(s) > s 1 / 14 - 8 @]. 

As an example, consider the following 3x3 Latin 
square and the 3x3 Hadmard matrix 
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This gives us basis B = {\v t j)\t,i £ [s]} for s = 3. 
The construction of another basis follows in exactly the 
same way from a mutually orthogonal Latin square. The 
fact that two such squares L and V are mutually or- 
thogonal ensures that the resulting bases will be mu- 
tually unbiased. Indeed, suppose we are given another 
such basis, B' = {\u t j)\t,£ £ [s]} belonging to L' . 
We then have for any £,£' £ [s] that |(ui/'| w i.^)| 2 — 
l(V«) Eij g [.] E^{£')E^{£)\ 2 = 1/s 2 , as there exists ex- 
cactly only one pair £,£' £ [s] such that E^l^E^t) = 
1. Clearly, the same argument holds for the additional 
vectors derived from the Hadamard matrix. 



2. Generalized Pauli matrices 

The second construction we consider is based on 
the generalized Pauli matrices Xd and Zd [19(, de- 
fined by their actions on the computational basis C = 
{|1), . . . , \d)} as follows: 

X d \k) = \k+ l),Z d \k) = co k \k), V|*c) G C, 



d - 1} and k £ [N] is 



1 MUBs 
can 



21] 



where w = e 27 "/ d . We say that (X d ) ai (Z d 
{X d ) aN (Z d ) bN for a kl b k £ {0, 
a string of Pauli Matrices. 

If d is a prime, it is known that the d - 
constructed first by Wootters and Fields 
also be obtained as the eigenvectors of the matrices 
Z d ,X d ,X d Z d ,X d Z 2 ,...,X d Z d - 1 [H. If d = p k is a 
prime power, consider all d 2 — 1 possible strings of Pauli 
matrices excluding the identity and group them into sets 
Ci, . . . , C d +i such that |C»| = d- 1 and C l U Cj = {1} for 
i =/= j and all elements of d commute. Let Bi be the com- 
mon eigenbasis of all elements of Cj. Then Bi, . . . , B d+ i 
are MUBs A similar result for d = 2 k has also 

been shown in (25[. A special case of this construc- 
tion are the three mutually unbiased bases in dimension 
d = 2 k given by the unitaries and K® k with 

K = (I + ia x )/y/2 applied to the computational basis. 
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B. 2-designs 



A. MUBs in square dimensions 



For the purposes of the present work, spherical t- 
designs (see for example Ref. [26| ) can be defined as fol- 
lows. 

Definition 2 (t-design) Let {\t{), . . . , |r m )} be a set of 
state vectors in C d , they are said to form a t-design if 



M,d) 



i = l 



TtU 



(t,d) ■ 



where H+(t, d) is a projector onto the completely sym- 
metric subspace of C d8 * and 

Trn M) = (d+t-i\ _ (d+t-iy. 



d-i 



(d-l)\ t\ ' 



is its dimension. 



Any set B of d + 1 MUBs forms a spherical 2-design 
Hi H3, i.e., we have for B = {B 1 , . . . , B d+1 } with 
B t = {|6i),...,^)}that 



d+l d 



n 



(2,d) 



II. UNCERTAINTY RELATIONS 

We now prove tight entropic uncertainty for measure- 
ments in MUBs in square dimensions. The main result 
of which will be very useful for us, is stated next. 

Theorem 1 (Maassen and Uffink) Let B\ and B2 be 

two orthonormal basis in a Hilbert space of dimension d. 
Then for all pure states j^) 

i [H{B 1 M))+H{B 2 ,\m >-\ogc{B ll B 2 ), (3) 

where c(B u B 2 ) = max {|<6i|6 2 ) | : |&i) eB u \b 2 ) eB 2 }. 

The case when B\ and B 2 are MUBs is of special interest 
for us. More generally, when one has a set of MUBs a 
trivial application of ((3| leads to the following corollary 
also noted in Q. 

Corollary 1 Let B = {Bt, . . .,B m }, be a set of MUBs 
in a Hilbert space of dimension d. Then 



±±H(B t , m >^- 



(4) 



Proof. Using (J3]) , one gets that for any pair of MUBs 
B t and B t > with t ^ t' 



(5) 



Adding up the resulting equation for all pairs t ^ t' we 
get the desired result (0}. □ 
Here, we now show that this bound can in fact be tight 
for a large set of MUBs. 



Corollary [T] gives a lower bound on the average of the 
entropies of a set of MUBs. The obvious question is 
whether that bound is tight. We show that the bound is 
indeed tight when we consider product MUBs in a Hilbert 
space of square dimension. 

Theorem 2 Let B = {B\, . . . , B m } with m > 2 be a set 
of MUBs in a Hilbert space TL of dimension s. Let U t be 
the unitary operator that transforms the computational 
basis to Bt- Then Y — {Vi, . . . , V m }, where 

Vt = {U t \k)®U?\l) :k,le [a]}, 

is a set of MUBs in Ti. ®1-L, and it holds that 



. 1 
mm — 

\ij>) m 



£if(V t ,|V» 



logd 



(6) 



s 2 . 



where d — dim(7i (g) TL) 

Proof. It is easy to check that V is indeed a set of 
MUBs. Our proof works by constructing a state \tp) that 
achieves the bound in Corollary [TJ It is easy to see that 
the maximally entangled state 

!</>> = -5= £>fc>, 

k=l 

satisfies U ® U*\i/j) = \ip) for any U € U(d). Indeed, 
(tP\U®U*\iP) = ± Y,(k\U\l)(k\U*\l) 



k,l=l 
1 f 

E 

k,l=l 

1 



(k\U\l)(l\U^\k) 



= - TrUtf = 1. 

s 

Therefore, for any t G [m] we have that 



kl 



kl 



\(ki\u t ®u;m 2 \og\{ki\u t ®u* t m 2 

\(kim 2 \o g \(ki\i,)\ 2 

logd 



= log s = 

Taking the average of the previous equation we get the 
desired result. □ 



B. MUBs based on Latin Squares 

We now consider mutually unbiased bases based on 
Latin squares 0] as described in Section [TJ Our proof 
again follows by providing a state that achieves the bound 
in Corollary [TJ which turns out to have a very simple 
form. 
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Lemma 1 Let B = {Bi, . . . , B m } with m > 2 be any set 
of MUBs in a Hilbert space of dimension d — s 2 con- 
structed on the basis of Latin squares. Then 

■»4 !•»> = ¥■ 



Bel 



Proof. Consider the state = 1 1 , 1) and fix a basis 
Bt = {|«| j € [s]} S B coming from a Latin square. 
It is easy to see that there exists exactly one j € [s] such 
that (uf 1) = l/v 7 *- Namely this will be the j € [s] 
at position (1,1) in the Latin square. Fix this j. For 
any other I e [s},£ ^ j, we have (u*^|l, 1) = 0. But 



this means that there exist exactly s vectors in B such 
| 2 = 1/s, namely exactly the s vectors 



that K^-IM) 



derived from 



via the Hadamard matrix. The same 



argument holds for any such basis B € T. We get 

£#(B,|1,1)) = J2 E l«,lM}| 2 log|«,|l,i} 
BeB BeBi,je[ s ] 

= |T[ S -log- 

s s 



IT 



logd 



The result then follows directly from Corollary [T] □ 



C. Using a full set of MUBs 

We now provide an alternative proof of an entropic 
uncertainty relation for a full set of mutually unbiased 
bases. This has previously been proved in [5j. Neverthe- 
less, because our proof is so simple using existing results 
about 2-designs we include it here for completeness, in 
the hope that if may offer additional insight. 

Lemma 2 Let B be a set of d + 1 MUBs in a Hilbert 
space of dimension d. Then 



^J2h 2 (b, m > log 

BeB 



1 



Proof. Let B t = {\b{), . . . , \b* d )} and 

{Bi, . . . ,Bd+i}- We can then write 

d+1 



BeB 



• f=l fe=l 

* lo g(rfiiEEK 6 ^>r 



*=i fe=i 



log 



'd + 1 



fact that a full set of MUBs forms a 2-design and |27l . 
Theorem 1]. □ 

We then obtain the original result by Sanchez-Ruiz [B[ 
by noting that H(-) > H 2 {-). 

Corollary 2 Let B be a set of d+1 MUBs in a Hilbert 
space of dimension d. Then 



^-L_£/f(B,|V»>log 



BeB 



d+1 



III. LOCKING 

We now turn our attention to locking. We first explain 
the connection between locking and entropic uncertainty 
relations. In particular, we show that for MUBs based on 
generalized Pauli matrices, we only need to look at such 
uncertainty relations to determine the exact strength of 
the locking effect. We then consider how good MUBs 
based on Latin squares are for locking. 

In order to determine how large the locking effect is 
for some set of mutually unbiased bases B, and the state 

|B| d 

p^B = EE^d fc )( fc l ® l*K f l^ ® (\ b kM\)B, (7) 
t=l fc=l 

we must find an optimal bound for T c (pab)- Here, {pt.k} 
is a probability distribution over B x [d]. That is, we must 
find a POVM Ma <8> Mb that maximizes Eq. (H|). It has 
been shown in [ll| that we can restrict ourselves to to tak- 
ing Ma to be the local measurement determined by the 
projectors {|fe)(fc| ® |t)(£|}- It is also known that we can 
limit ourselves to take the measurement Mb consisting 
of rank one elements {a,-|$i)($i|} only [28|, where a, > 
and |$j) is normalized. Maximizing over Mb then corre- 
sponds to maximizing Bob's accessible information (29l . 
Eq. (9.75)] for the ensemble £ — {pk,t, 



K)(bl\} 



1acc{£) = max ( ~y^Pfc,j logpk, t - 



(8) 



E E Pk > ta * (®i\Pk,t\$i) 



i k.t 



Pk,t(^i\pk,t\^i 



where ix = J2k.tPk,tPk,t and p k ,t = l^)(^ fe l- Therefore, 
we have I c (pab) = Z acc (£). We are now ready to prove 
our locking results. 



A. An example 



where the first inequality follows from the concavity of 
the log, and the final inequality follows directly from the 



We first consider a very simple example with only three 
MUBs that provides the intuition behind the remainder 
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of our paper. The three MUBs we consider now are gen- 
erated by the unitaries I, H and K = (l + ia x )/y^2 when 
applied to the computational basis. For this small ex- 
ample, we also investigate the role of the prior over the 
bases and the encoded basis elements. It turns out that 
this does not affect the strength of the locking effect pos- 
itively. Actually, it is possible to show the same for en- 
codings in many other bases. However, we do not consider 
this case in full generality as to not obscure our main line 
of argument. 

Lemma 3 Let U = I® n ,Ui = H® n , and U 2 = K® n , 
where k G {0,1}" and n is an even integer. Let {pt} 
with t G [3] be a probability distribution over the set S = 
{Ui,U 2 ,U 3 }. Suppose that pi,p 2 ,P3 < 1/2 and let p t ^ k = 
Pt(l/d). Consider the ensemble £ = {pthi Ut\k)(k\U t }}, 
then 

If, on the other hand, there exists a t G [3] such that 
p t > 1/2, thenl acc {£) > n/2. 

Proof. We first give an explicit measurement strat- 
egy and then prove a matching upper bound on X acc . 
Consider the Bell basis vectors |r 00 ) = (|00) + |ll))/\/2, 
|r 01 ) - (|00) - |11»/V2, |r 10 ) = (|01) + |10»/V2, and 
|r u ) = (|01) - |10))/V2. Note that we can write for the 
computational basis 



|00) = 




+ |r i» 


|01) = 




+ |ru» 


[10) = 


71 (|ri0> 


-|ru» 


111) = 




- |r i» 



The crucial fact to note is that if we fix some k\k 2 , then 
there exist exactly two Bell basis vectors (r^^) such that 
\(Ti 1 i 2 \kik2)\ 2 = 1/2. For the remaining two basis vectors 
the inner product with \k1k2) will be zero. A simple cal- 
culation shows that we can express the two qubit basis 
states of the other two mutually unbiased bases analo- 
gously: for each two qubit basis state there are exactly 
two Bell basis vectors such that the inner product is zero 
and for the other two the inner product squared is 1/2. 

We now take the measurement given by {|rj)(rj|} with 
|r») = |rj 1 i 2 ) <E> ■ ■ ■ <£> \Fi„-ii„) for the binary expansion 
of i — i±i2 ■ ■ ■ i n - Fix a k — k\k 2 ■ ■ ■ k n . By the above 
argument, there exist exactly 2 n l 2 strings % G {0, l} n such 
that I (Ti I A;) | 2 = l/(2"/ 2 ). Putting everything together, 
Eq. ijHJ) now gives us for any prior distribution {pt,k} that 

- ^(r^ir,) fog^i^ir,) - 2 < i acc ( £ ). (9) 



For our particular distribution we have fj, — I/d and thus 

"2" — -^acc \£) ■ 

We now prove a matching upper bound that shows that 
our measurement is optimal. For our distribution, we can 
rewrite Eq. © for the POVM given by {ai|$i)($»|} to 

Zacc(£) = max (log d+ 

At 

^^ ft |($,|[/ t |t)| 2 lo g |(«l.,|[r ( |i)| 2 

i k,t J 

= max ^logd- 7 T,PMB t , . 

It follows from Corollary [1] that Vi G {0, 1}" and 
Pl,P2,P3 < 1/2, 

(1/2 - Pl )[H(B 2 , m) + H(B 3 , |$ t -))] + 
(I/ 2 - p2)[H(Bi, |$i)) + H(B 3 , |$j))] + 
(1/2 - ps)[ff(Bi, 1$,)) + H(B 2 , !$<))] > n/2. 

Reordering the terms we now get Y^t=iPtH{B t , |$i)) > 
n/2. Putting things together and using the fact that 
J2i a i = d, we obtain 

from which the result follows. 

If, on the other hand, there exists a t G [3] such that 
p t > 1/2, then by measuring in the basis B t we obtain 
1acc{£) > Ptn > n/2. □ 

Above, we have only considered a non-uniform prior 
over the set of bases. In [3fJ it is observed that when we 
want to guess the XOR of a string of length 2 encoded 
in one (unknown to us) of these three bases, the uniform 
prior on the strings is not the one that gives the smallest 
probability of success. This might lead one to think that 
a similar phenomenon could be observed in the present 
setting, i.e., that one might obtain better locking with 
three basis for a non-uniform prior on the strings. In 
what follows, however, we show that this is not the case. 

Let pt = ^2 k Pk,t be the marginal distribution on the 
basis, then the difference in Bob's knowledge between re- 
ceiving only the quantum state and receiving the quan- 
tum state and the basis information is given by 

A(p M ) = H( Pk .t) -l aC c(£) - H{ Pt ), 

substracting the basis information itself. Consider the 
post-measurement state v — ^Yln^ i\p^ i\- Using 
© we obtain 

A(p fc ,t) < H(p Kt ) - S(u) + n/2 - H(p t ), (10) 
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where S is the von Neuman entropy. Consider the state 

d 3 

Pia = EZ>m(I*)<*I)i (ww^, 



fc=i t=i 
we have that 

S(pl2)=ff(Pfc,t) <S(pi) + 5(p 2 ) 
= (ft) + 

< H(jh) + 

Using (I10|) and the previous equation we get 

A(p fc)t ) < n/2, 

for any prior distribution. This bound is saturated by the 
uniform prior and therefore we conclude that the uniform 
prior results in the largest gap possible. 

B. MUBs from generalized Pauli Matrices 

We first consider MUBs based on the generalized Pauli 
matrices Xd and Zd as described in Section Q] We con- 
sider a uniform prior over the elements of each basis and 
the set of bases. Choosing a non-uniform prior does not 
lead to a better locking effect. 

Lemma 4 Let B = {£>i, . . . ,B m } be any set of MUBs 
constructed on the basis of generalized Pauli matrices in 
a Hilbert space of prime power dimension d — p N . Con- 
sider the ensemble £ = {-gr, Then 

I acc (S) = logd- -min V H(B u \ip)). 

771 |?/)) * — ' 



Bt & 



Proof. We can rewrite Eq. ([8|) for the POVM given by 
{a t | $,:)($,: | } to 

1 a cc{£) = max (log d+ 

i k,t 

= max (togd - J2 ^ X>#(^ |$,))J . 

For convenience, we split up the index i into i = ab 
with a = <zi, . . . , djv and 6 = b\, . . . ,bw, where at, bt £ 
{0, ... ,p — 1} in the following. 

We first show that applying generalized Pauli matrices 
to the basis vectors of a MUB merely permutes those 
vectors. 



Claim 1 Let B t = {\b\) 



\bV)} be a basis based 



generalized Pauli matrices ( Section^) with d = p N . Then 
Va,6 G {0,...,p- l} N yk G [d] we have that 3k' G [d], 



Proof. Let E p for i G {0, 1, 2, 3} denote the generalized 
Pauli's E? 



X p , Yip 



Zp, and E 2 — XpZp. 



Note that X%Z% = w uv Z%X£, where u = e 27 "/ p . Fur- 



(x-l) 



E; <g> F"* to be 



thermore, define Ej 
the Pauli operator E p applied to the x-th qupit. Recall 
from Section [J that the basis Bt is the unique simulta- 
neous eigenbasis of the set of operators in Ct, i.e., for 
all k £ [d] and f,g G [N], \b\) G B t and G C t , 
we have c^- g \b l k ) = X\ j g |6|,) for some value Aj(. ^ . Note 
that any vector \v) that satisfies this equation is pro- 
portional to a vector in Bt- To prove that any appli- 
cation of one of the generalized Paulis merely permutes 
the vectors in Bt is therefore equivalent to proving that 
are eigenvectors of Cy for any f,g£ [k] and 



-ii,(a;) 



i G {1,3}. This can be seen as follows: Note that 

4, 9 - <8d (^ (n) ) /N ( S * ( T fOT / = (/-■ ' M 

and 3 = (px, ...,g N ) with /jv,fljv € {0, ... ,p - 1} [11]. 
A calculation then shows that 



c f,g^p \°k 



i. A I 



where r/ x 



lu 9 * for i = 1 and r/_ 



Ei'( x) |6 



fc/) 



"J 1 for 



z = 3. Thus Yip' is an eigenvector of c^ g for all 
t, /, g and i, which proves our claim. □ 

Suppose we are given \ip) that minimizes 
J2 BtGT H(B t ,\ip))- We can then construct a full 
POVM with d 2 elements by taking {±\<Z> ab ) ($ ab |} 

with i* oi > = (x a /z b d i ® ... ® ir^)^>. 

However, it follows from our claim above that 
\/a,b,k,3k' sucht that |($ab|6* fc )| 2 = KV'l&fc/)] 2 , and 
thus H{B t ,\ip)) = H{B,\<f>ab)) from which the result 
follows. □ 

Determining the strength of the locking effects for such 
MUBs is thus equivalent to proving bounds on entropic 
uncertainty relations. We thus obtain as a corollary of 
Theorem [2] and Lemma 01 that, for dimensions which are 
the square of a prime power d = p 2N , using any product 
MUBs based on generalized Paulis does not give us any 
better locking than just using 2 MUBs. 

Corollary 3 Let § = {Si, . . . ,<5> m } with m > 2 be 
any set of MUBs constructed on the basis of generalized 
Pauli matrices in a Hilbert space of prime (power) di- 
mension s — p N . Define Ut as the unitary that trans- 
forms the computational basis into the t-th MUB, i.e., 
St = {Ut\l},...,U t \s}}. LetM = {Bi,...,B m } be the set 
of product MUBs with B t = {U t ® ?7 t *|l), . . • , U t <g> U;\d)} 
in dimension d = s 2 . Consider the ensemble £ = 

iik'lWkl}- Then 



lace (£) 



logd 



such that \b{,) ^X; 1 ^ 1 ®...® X^ N Z h d N |&f 



hi- 



Proof. The claim follows from Theorem [5] and the 
proof of Lemmadl by constructing a similar measurement 
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formed from vectors = K a i b i ® K^^l^P) with a = 

a 1 a 2 and = 6 1 fo 2 , where a 1 , a 2 and 6 1 , 6 2 are defined like 
a and 6 in the proof of Lemma HJ and K a t — {X^ZJ ® 
... I]" )t from above. □ 

The simple example we considered above is in fact a 
special case of Corollary [3] It shows that if the vector 
that minimizes the sum of entropies has certain symme- 
tries, such as for example the Bell states, the resulting 
POVM can even be much simpler. 

C. MUBs from Latin Squares 

At first glance, one might think that maybe the prod- 
uct MUBs based on generalized Paulis are not well suited 
for locking just because of their product form. Perhaps 
MUBs with entangled basis vectors do not exhibit this 
problem. To this end, we examine how well MUBs based 
on Latin squares can lock classical information in a quan- 
tum state. All such MUBs are highly entangled, with 
the exception of the two extra MUBs based on non-Latin 
squares. Surprisingly, it turns out, however, that any 
set of at least two MUBs based on Latin squares, does 
equally well at locking as using just 2 such MUBs. Thus 
such MUBs perform equally "badly", i.e., we cannot im- 
prove the strength of the locking effect by using more 
MUBs of this type. 

Lemma 5 Let B = {Bi, . . . , B m } with m > 2 be any set 
of MUBs in a Hilbert space of dimension d = s 2 con- 
structed on the basis of Latin squares. Consider the en- 
sembleE = {±\bi){bi\}. Then 

Proof. Note that we can again rewrite X acc (£) as in the 
proof of Lemma 0J Consider the simple measurement in 
the computational basis j € [s]}. The result 

then follows by the same argument as in Lemma [TJ □ 



IV. CONCLUSION AND OPEN QUESTIONS 

We have shown tight bounds on entropic uncertainty 
relations and locking for specific sets of mutually unbi- 
ased bases. Surprisingly, it turns out that using more 



mutually unbiased basis does not always lead to a bet- 
ter locking effect. It is interesting to consider what 
may make these bases so special. The example of 
three MUBs considered in Lemma [3] may provide a clue. 
These three bases are given by the common eigenbases 
of {a x ® a x ,a x (g) I, I® a x }, {a z 8^,^® 1,1® a z } and 
{<Jy®o-y, o- y ®\ l®(Jy} respectively However, a x ®u Xl 
o~ z ® c z and o~ y <g o~ v commute and thus also share a com- 
mon eigenbasis, namely the Bell basis. This is exactly 
the basis we will use as our measurement. For all MUBs 
based on generalized Pauli matrices, the MUBs in prime 
power dimensions are given as the common eigenbasis of 
similar sets consisting of strings of Paulis. It would be in- 
teresting to determine the strength of the locking effect 
on the basis of the commutation relations of elements 
of different sets. Perhaps it is possible to obtain good 
locking from a subset of such MUBs where none of the 
elements from different sets commute. 

It is also worth noting that the numerics of [lJ | indicate 
that at least in dimension p using more than three bases 
does indeed lead to a stronger locking effect. It would be 
interesting to know, whether the strength of the locking 
effect depends not only on the number of bases, but also 
on the dimension of the system in question. 

Whereas general bounds still elude us, we have shown 
that merely choosing mutually unbiased bases is not suf- 
ficient to obtain good locking effects or high lower bounds 
for entropic uncertainty relations. We thus have to look 
for different properties. 
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